Scarinci Hollenbeck, LLC
The Firm
201-896-4100 info@sh-law.comFirm Insights
Author: Scarinci Hollenbeck, LLC
Date: April 27, 2017
The Firm
201-896-4100 info@sh-law.comBusinesses should be vigilant about their cybersecurity this tax season. The Internal Revenue Service (IRS) issued a new warning that cybercriminals are targeting businesses with a Form W-2 phishing scam.
On March 1, 2016, the IRS warned payroll and human resources professionals to beware of an increasingly common phishing email scheme that seeks personal information from employees under the guise of a “spoofed” email from a company executive. According to the IRS, several payroll and human resources offices have fallen for the scheme and mistakenly emailed payroll data, including W-2 forms that contain Social Security numbers and other personally identifiable information, to cybercriminals posing as company executives. The perpetrators then use the stolen personal information for monetary gain, including fraudulent tax returns for refunds.
“This is a new twist on an old scheme using the cover of the tax season and W-2 filings to try tricking people into sharing personal data. Now the criminals are focusing their schemes on company payroll departments,” said IRS Commissioner John Koskinen. “If your CEO appears to be emailing you for a list of company employees, check it out before you respond. Everyone has a responsibility to remain diligent about confirming the identity of people requesting personal information about employees.”
Cybercriminals are increasingly targeting small businesses with phishing emails, malware and other scams. To stay vigilant, companies must stay on top of emerging threats. With regard to the W-2 scam, the IRS highlights that the phishing emails share common characteristics, namely that the email purports to come from the company chief executive officer and requests a list of employees and information, including SSNs. Below are some examples of W-2 phishing scam e-mail requests:
On February 2, 2017, the IRS warned that the W-2 Phishing Scam is evolving and that cybercriminals are targeting schools, restaurants, hospitals, tribal groups and others.
IRS Commissioner, John Koskinen stated that: “This is one of the most dangerous email phishing scams we’ve seen in a long time. It can result in the large-scale theft of sensitive data that criminals can use to commit various crimes, including filing fraudulent tax returns. We need everyone’s help to turn the tide against this scheme.”
The new scam includes cybercriminals who use “various spoofing techniques to disguise an email to make it appear as if it is from an organization executive. The email is sent to an employee in the payroll or human resources departments, requesting a list of all employees and their Forms W-2. This scam is sometimes referred to as business email compromise (BEC) or business email spoofing (BES).”
The IRS advised that the latest “twist” to the W-2 scam includes a request made by the cybercriminal to the payroll or comptroller of the entity which asks that a wire transfer of funds be made to a specific account. The IRS learned that the wire transfer scam is being coupled with the W-2 phishing scam and “some companies have lost both employees’ W-2s and thousands of dollars due to the wire transfers.”
There are several steps that you can take to protect your business from the W-2 scam and other similar phishing schemes. As with any cybersecurity or data privacy measure, the key is to implement safeguards and educate staff about their importance. Below are several key tips to share with your human resources professionals:
The IRS urged organizations receiving a W-2 scam email to forward the suspect email to phishing@irs.gov and place “W2 Scam” in the subject line. Further, the IRS recommends organizations that receive the scams or fall victim to same to file a complaint with the Internet Crime Complaint Center (IC3,) operated by the Federal Bureau of Investigation.
No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.
On February 14, 2025, the Office of General Counsel (OGC) of the National Labor Relations Board (NLRB) under Acting General Counsel William B. Cowen issued Memorandum 25-05, “New Process for More Efficient, Effective, Accessible and Transparent Case handling.” The Memorandum rescinds nearly all of the Memoranda issued by his direct predecessor, Jennifer Abruzzo, setting the […]
Author: Matthew F. Mimnaugh
If you purchase real property from a foreign person or entity, you may be required to withhold taxes from your payment to the seller under the Foreign Investment in Real Property Tax Act (FIRPTA). The federal tax law is designed to ensure that foreign sellers pay any applicable capital gains tax on profits realized from […]
Author: Jesse M. Dimitro
Your home is likely your greatest asset, which is why it is so important to adequately protect it. Homeowners insurance protects you from the financial costs of unforeseen losses, such as theft, fire, and natural disasters, by helping you rebuild and replace possessions that were lost While the definition of “adequate” coverage depends upon a […]
Author: Jesse M. Dimitro
Making a non-contingent offer can dramatically increase your chances of securing a real estate transaction, particularly in competitive markets like New York City. However, buyers should understand that waiving contingencies, including those related to financing, or appraisals, also comes with significant risks. Determining your best strategy requires careful analysis of the property, the market, and […]
Author: Jesse M. Dimitro
Business Transactional Attorney Zemel to Spearhead Strategic Initiatives for Continued Growth and Innovation Little Falls, NJ – February 21, 2025 – Scarinci & Hollenbeck, LLC is pleased to announce that Partner Fred D. Zemel has been named Chair of the firm’s Strategic Planning Committee. In this role, Mr. Zemel will lead the committee in identifying, […]
Author: Scarinci Hollenbeck, LLC
Big changes sometimes occur during the life cycle of a contract. Cancelling a contract outright can be bad for your reputation and your bottom line. Businesses need to know how to best address a change in circumstances, while also protecting their legal rights. One option is to transfer the “benefits and the burdens” of a […]
Author: Dan Brecher
No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.
Consider subscribing to our Firm Insights mailing list by clicking the button below so you can keep up to date with the firm`s latest articles covering various legal topics.
Stay informed and inspired with the latest updates, insights, and events from Scarinci Hollenbeck. Our resource library provides valuable content across a range of categories to keep you connected and ahead of the curve.
Businesses should be vigilant about their cybersecurity this tax season. The Internal Revenue Service (IRS) issued a new warning that cybercriminals are targeting businesses with a Form W-2 phishing scam.
On March 1, 2016, the IRS warned payroll and human resources professionals to beware of an increasingly common phishing email scheme that seeks personal information from employees under the guise of a “spoofed” email from a company executive. According to the IRS, several payroll and human resources offices have fallen for the scheme and mistakenly emailed payroll data, including W-2 forms that contain Social Security numbers and other personally identifiable information, to cybercriminals posing as company executives. The perpetrators then use the stolen personal information for monetary gain, including fraudulent tax returns for refunds.
“This is a new twist on an old scheme using the cover of the tax season and W-2 filings to try tricking people into sharing personal data. Now the criminals are focusing their schemes on company payroll departments,” said IRS Commissioner John Koskinen. “If your CEO appears to be emailing you for a list of company employees, check it out before you respond. Everyone has a responsibility to remain diligent about confirming the identity of people requesting personal information about employees.”
Cybercriminals are increasingly targeting small businesses with phishing emails, malware and other scams. To stay vigilant, companies must stay on top of emerging threats. With regard to the W-2 scam, the IRS highlights that the phishing emails share common characteristics, namely that the email purports to come from the company chief executive officer and requests a list of employees and information, including SSNs. Below are some examples of W-2 phishing scam e-mail requests:
On February 2, 2017, the IRS warned that the W-2 Phishing Scam is evolving and that cybercriminals are targeting schools, restaurants, hospitals, tribal groups and others.
IRS Commissioner, John Koskinen stated that: “This is one of the most dangerous email phishing scams we’ve seen in a long time. It can result in the large-scale theft of sensitive data that criminals can use to commit various crimes, including filing fraudulent tax returns. We need everyone’s help to turn the tide against this scheme.”
The new scam includes cybercriminals who use “various spoofing techniques to disguise an email to make it appear as if it is from an organization executive. The email is sent to an employee in the payroll or human resources departments, requesting a list of all employees and their Forms W-2. This scam is sometimes referred to as business email compromise (BEC) or business email spoofing (BES).”
The IRS advised that the latest “twist” to the W-2 scam includes a request made by the cybercriminal to the payroll or comptroller of the entity which asks that a wire transfer of funds be made to a specific account. The IRS learned that the wire transfer scam is being coupled with the W-2 phishing scam and “some companies have lost both employees’ W-2s and thousands of dollars due to the wire transfers.”
There are several steps that you can take to protect your business from the W-2 scam and other similar phishing schemes. As with any cybersecurity or data privacy measure, the key is to implement safeguards and educate staff about their importance. Below are several key tips to share with your human resources professionals:
The IRS urged organizations receiving a W-2 scam email to forward the suspect email to phishing@irs.gov and place “W2 Scam” in the subject line. Further, the IRS recommends organizations that receive the scams or fall victim to same to file a complaint with the Internet Crime Complaint Center (IC3,) operated by the Federal Bureau of Investigation.
Let`s get in touch!
Sign up to get the latest from the Scarinci Hollenbeck, LLC attorneys!